Medium
CVE-2023-28790
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-4040
Stripe Payment Plugin for WooCommerce <= 3.7.9 - Missing Authorization to Arbitrary Order Status Modification
Medium
CVE-2023-40557
Tabs & Accordion <= 1.3.10 - Authenticated (Contributor+) Content Injection
Critical
CVE-2023-40609
Contact form 7 Custom validation <= 1.1.3 - Unauthenticated SQL Injection via 'post'
Medium
CVE-2023-40605
Typing Effect <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-27617
RSVPMarker <= 10.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
High
CVE-2023-40601
Mortgage Calculator Estatik <= 2.0.11 - Reflected Cross-Site Scripting
Medium
CVE-2023-40603
Simple Org Chart <= 2.3.4 - Missing Authorization
Medium
CVE-2023-4376
Serial Codes Generator and Validator with WooCommerce Support <= 2.4.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2023-27616
RSVPMaker <= 10.6.5 - Unauthenticated Stored Cross-Site Scripting via 'email'
Medium
96112707-04ca-4647-9008-31954764486f
Gallery Portfolio <= 1.4.6 - Missing Authorization via Multiple AJAX actions
Medium
CVE-2023-40011
Cost Calculator Builder <= 3.1.42 - Improper Authorization
Medium
CVE-2023-28791
Simple Org Chart <= 2.3.4 - Cross-Site Request Forgery
Medium
CVE-2023-4772
Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-40330
GD Security Headers <= 1.6.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-40602
Doofinder for WooCommerce <= 1.5.49 - Unauthenticated Open Redirect
High
CVE-2023-40335
Cleverwise Daily Quotes <= 3.2 - Reflected Cross-Site Scripting
High
CVE-2023-3169
tagDiv Composer <= 4.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-7296
BigBlueButton <= 3.0.0-beta.4 - Authenticated (Author+) Stored Cross-Site Scripting
Critical
CVE-2023-4404
Donation Forms by Charitable <= 1.7.0.12 - Unauthenticated Privilege Escalation
Medium
CVE-2023-40608
Paid Memberships Pro CCBill Gateway <= 0.3 - Insufficient Authorization
Medium
CVE-2023-40607
CLUEVO LMS, E-Learning Platform <= 1.10.0 - Cross-Site Request Forgery
High
CVE-2023-40606
Kanban Boards <= 2.5.21 - Authenticated (Administrator+) Remote Code Execution
Medium
CVE-2023-3170
tagDiv Composer <= 4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.